Issues

• Specification Comliance Misses

  google/flatbuffers#9480 · Filter by author leo-gan opened on Nov 14, 2026

• flatc --lua/--nim from a direct .bfbs binary schema: NULL pointer dereference on out-of-range object index (DoS)

  google/flatbuffers#9453 · Filter by author sevaksargsyan opened on Nov 3, 2026

• rust: make the unchecked read path a gencode-only boundary with one checked entry point

  google/flatbuffers#9428 · Filter by author MCPVOT opened on Oct 22, 2026

• reflection: ForAllFields writes out of bounds when field->id() exceeds fields()->size()

  google/flatbuffers#9426 · Filter by author sai5880 opened on Oct 21, 2026

• [C++] Object API: Pack() dereferences null when a union has its type set but no value (buffer passes the verifier)

  google/flatbuffers#9416 · Filter by author professor-moody opened on Oct 18, 2026

• [Go] Object size is not considered during vtable de-duplication

  google/flatbuffers#9413 · Filter by author rustyconover opened on Oct 17, 2026

• Pilot: adopt the Safe Buffers model (-Wunsafe-buffer-usage) for idl_parser.cpp

  google/flatbuffers#9314 · Filter by author ghost opened on Oct 9, 2026

• Runtime hardening: unverified GetRoot/table/vector access allows OOB read/crash from tiny buffers + insecure sample

  google/flatbuffers#9295 · Filter by author siddharthpathak176-source opened on Oct 2, 2026

• Allow to disable lowercase snake_case warning for fields

  google/flatbuffers#9243 · Filter by author hasselmm opened on Sep 14, 2026

• [Rust] Clarify MSRV and Clippy policy

  google/flatbuffers#9238 · Filter by author avalon1k opened on Sep 11, 2026

• [Rust] Add paired doctests for vector unsafe-call contracts

  google/flatbuffers#9232 · Filter by author mhusnain8721 opened on Sep 9, 2026

• [Python] flatc --python silently overwrites existing __init__.py files

  google/flatbuffers#9229 · Filter by author d3r1n opened on Sep 8, 2026

• [Python] Generated type stubs don't work

  google/flatbuffers#9224 · Filter by author MKuranowski opened on Sep 4, 2026
  2

• [Python] Incorrect usage of py.typed marker

  google/flatbuffers#9223 · Filter by author MKuranowski opened on Sep 4, 2026

• [benchmark] Request for call-path / fairness review (GLD.SerializerBenchmark)

  google/flatbuffers#9221 · Filter by author leo-gan opened on Sep 4, 2026

• CMake package should expose a single canonical flatbuffers::flatbuffers target

  google/flatbuffers#9206 · Filter by author alexreinking opened on Aug 24, 2026

• OSS-Fuzz issue 542909756

  google/flatbuffers#9194 · Filter by author oss-fuzz-robot opened on Aug 5, 2026

• Heap Out-of-Bounds Write via Integer Overflow in FlatBufferBuilder

  google/flatbuffers#9193 · Filter by author zwst061106-bot opened on Aug 5, 2026

• Publish a Linux ARM64 flatc in releases

  google/flatbuffers#9191 · Filter by author CommanderTvis opened on Jul 31, 2026

• Rust: Verifier::reset() does not reset apparent_size (duplicated num_tables assignment)

  google/flatbuffers#9189 · Filter by author renz011tzar opened on Jul 30, 2026

• Request for the fairness review

  google/flatbuffers#9185 · Filter by author leo-gan opened on Jul 22, 2026
  1

• [C++] FlatBufferBuilder writes unreadable buffers on targets where alignof(scalar) < sizeof(scalar)

  google/flatbuffers#9182 · Filter by author kmehltretter82 opened on Jul 22, 2026
  1

• [C++][Java] Cross language incompatability when working with maps

  google/flatbuffers#9180 · Filter by author le-michael opened on Jul 20, 2026
  4

• [benchmark] Request for call-path / fairness review (GLD.SerializerBenchmark)

  google/flatbuffers#9178 · Filter by author leo-gan opened on Jul 17, 2026

• [benchmark] Request for call-path / fairness review (GLD.SerializerBenchmark)

  google/flatbuffers#9177 · Filter by author leo-gan opened on Jul 17, 2026